CVE-2016-5821: Undefined Security Weakness

Huawei HiSuite before 4.0.4.204ove Out of China and before 4.0.4.301 China use a weak ACL FILEWRITEDATA for BUILTIN\Users for the HiSuite service directory, which allows local users to gain SYSTEM privileges via a Trojan horse 1 SspiCli.dll or 2 USERENV.dll file or possibly other unspecified DLL...

Cisco Adaptive Security Appliance Access Control List ICMP Echo Request Code Filtering Vulnerability (cisco-sa-20160711-asa)

A vulnerability in the Cisco Adaptive Security Appliance ASA Software implementation of access control list ACL permit and deny filters for ICMP Echo Reply messages could allow an unauthenticated, remote attacker to bypass ACL configurations for an affected device. ICMP traffic that should be...

Authentication flaw

Cisco Adaptive Security Appliance ASA Software 8.2 through 9.4.3.3 allows remote attackers to bypass intended ICMP Echo Reply ACLs via vectors related to subtypes...

CVE-2016-1445: Undefined Security Weakness

Cisco Adaptive Security Appliance ASA Software 8.2 through 9.4.3.3 allows remote attackers to bypass intended ICMP Echo Reply ACLs via vectors related to subtypes...

The vulnerability of Samba software allows a remote attacker to compromise the confidentiality and integrity of protected information.

A vulnerability exists in the ownerset function in smbcacls.c within smbcacls in Samba, due to the deletion of the access control list when the --chown or --chgrp parameter is used. Exploiting this vulnerability allows malicious actors to circumvent access restrictions by making unauthorized...

CVE-2016-1237

nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related to nfs2acl.c, nfs3acl.c, and nfs4acl.c...

CVE-2016-1237

nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related to nfs2acl.c, nfs3acl.c, and nfs4acl.c...

Design/Logic Flaw

nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related to nfs2acl.c, nfs3acl.c, and nfs4acl.c...

CVE-2016-1237

nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related to nfs2acl.c, nfs3acl.c, and nfs4acl.c...

CVE-2016-1237

CVE-2016-1237 affects the Linux kernel’s nfsd: a missing permissions check when setting POSIX ACLs allows a local user to bypass file-permission restrictions by manipulating ACLs (nfs2acl.c, nfs3acl.c, nfs4acl.c). The vulnerability is described as present in kernels up to 4.6.3 and is addressed i...

CVE-2016-1237

nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related to nfs2acl.c, nfs3acl.c, and nfs4acl.c...

CVE-2016-1237

nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related to nfs2acl.c, nfs3acl.c, and nfs4acl.c...

CVE-2016-1237

It was found that nfsd is missing permissions check when setting ACL on files, this may allow a local users to gain access to any file by setting a crafted ACL...

Security Advisory 0022

Security Advisory 0022 PDF Date: June 28th, 2016 Version: 1.1 Revision| Date| Changes ---|---|--- 1.0 | June 15th, 2016 | Initial release 1.1 | June 28th, 2016 | Updated to remove a part of the mitigation section that involved ipv6 ACLs with hop-limit. This section was removed in order to avoid a...

CVE-2016-2855

The Huawei Mobile Broadband HL Service 22.001.25.00.03 and earlier uses a weak ACL for the MobileBrServ program data directory, which allows local users to gain SYSTEM privileges by modifying VERSION.dll...

Code injection

The Huawei Mobile Broadband HL Service 22.001.25.00.03 and earlier uses a weak ACL for the MobileBrServ program data directory, which allows local users to gain SYSTEM privileges by modifying VERSION.dll...

CVE-2016-2855

The Huawei Mobile Broadband HL Service 22.001.25.00.03 and earlier uses a weak ACL for the MobileBrServ program data directory, which allows local users to gain SYSTEM privileges by modifying VERSION.dll...

CVE-2016-2855

Huawei Mobile Broadband HL Service (Windows) 22.001.25.00.03 and earlier is vulnerable to a DLL side-loading attack via a weak ACL on the MobileBrServ data directory, allowing local unprivileged users to modify VERSION.dll and gain SYSTEM privileges. This is a local privilege escalation; exploita...

CVE-2016-2855: Undefined Security Weakness

The Huawei Mobile Broadband HL Service 22.001.25.00.03 and earlier uses a weak ACL for the MobileBrServ program data directory, which allows local users to gain SYSTEM privileges by modifying VERSION.dll...

PT-2016-5243

Name of the Vulnerable Software and Affected Versions Huawei Mobile Broadband HL Service versions 22.001.25.00.03 and earlier Description The issue allows local users to gain SYSTEM privileges by modifying the VERSION.dll. This is due to a weak Access Control List ACL used for the MobileBrServ...